Bug#1139232: python-cryptography: FTBFS with openssl 4.0

[Andrey Rakhmatullin]

Control: tags -1 + upstream fixed-upstream

On Sun, Jun 07, 2026 at 02:49:44PM +0200, Sebastian Andrzej Siewior wrote:

The issue at
        https://github.com/pyca/cryptography/issues/14656

has been closed with "Needs rust-openssl support first". The version in
Debian has openssl-4 support already and packages compile against it
with openssl 4.0. I am not sure if there is something missing in
python-cryptography or of it is resolved as of latest 48 release or in
the git repository. It still fails to compile as of today.

--
WBR, wRAR

47.0.0 changelog says "Fixed compilation when using LibreSSL 4.3.0 and OpenSSL 4.0.0." and there are some changes regarding ASN1_OCTET_STRING in src/_cffi_src/openssl/asn1.py in that version, so yeah I think there are some specific code fixes in that version. Newer python-cryptography is currently blocked on rust-asn1 but I hope cjwatson untangles that soon. In the worst case we can try backporting the OpenSSL change.

signature.asc
Description: PGP signature